Adnan Siddiqui

Author at Jutsu

Published Posts

20 posts

PentestingJun 10, 2026

Your Automated Pentest Looks Clean. Here’s What It Misses

A spotless pentest report can feel reassuring. It can also be misleading. Run automated pentesting a few cycles in a row and the “new” findings taper off. By the third or fourth pass, the report looks steady. It’s easy for “stable” to read as “secure.” Often, it isn’t. The pace slows. The risk stays. That […]

Artificial IntelligenceJun 10, 2026

Claude Fable 5 launches with cyber safeguards; Mythos 5 kept for vetted defenders

Anthropic released Claude Fable 5 on June 9. It’s the company’s most capable model to date and generally available. There’s a twist: Anthropic is shipping one underlying model in two forms, separated by a layer of safety classifiers. Fable 5 is the public release. Claude Mythos 5—functionally the same model with cyber safeguards lifted—remains restricted […]

Cyber AttackJun 10, 2026

ServiceNow flaw exploited for unauthorized access to some customer instances

ServiceNow has warned that unknown threat actors exploited a flaw to gain deeper, unauthorized access to some susceptible customer instances. What ServiceNow says happened In an advisory for customers, the company said: “On June 5, 2026, ServiceNow applied a security update to hosted customer instances. The update concerned a security issue that could allow an […]

VulnerabilityJun 10, 2026

RoguePlanet zero-day in Microsoft Defender gives SYSTEM access on fully patched Windows

Another Microsoft Defender zero-day is out in the open. The anonymous researcher known as Chaotic Eclipse (aka Nightmare-Eclipse) has released a proof-of-concept exploit called RoguePlanet. What happened The researcher published details and a PoC, and shared code under a new GitHub account named MSNightmare. “The exploit is a race condition, so it’s a hit or […]

JavaScriptJun 10, 2026

Proto6: Six protobuf.js flaws expose Node.js apps to RCE and DoS

Six vulnerabilities in protobuf.js—the JavaScript/TypeScript implementation of Protocol Buffers (Protobuf)—can lead to remote code execution (RCE) and denial of service (DoS) in Node.js environments. Cyera’s research team collectively codenamed the issues Proto6. If you work with services that serialize or deserialize Protobuf, this matters. Protobuf is a widely used, open-source way to encode structured data. […]

Artificial IntelligenceJun 09, 2026

Meta will use off‑site business data to personalize Feed and AI

Meta said on Tuesday that it will start using information shared by other businesses to personalize more than ads. That same off‑site activity will shape what you see in your Feed and how its AI chatbot responds. What’s changing Meta already uses off‑site activity — like games you play or purchases you make on other […]

AI SecurityJun 09, 2026

Microsoft restores some GitHub repos as Miasma probe continues

What changed Microsoft confirmed it temporarily removed some GitHub repositories after a recent security incident in which 73 open-source projects were compromised to inject an information stealer. “Our priority is to protect customers and the broader ecosystem,” a Microsoft spokesperson told The Hacker News via email. “We temporarily removed some repositories as we investigated potential […]

Cyber EspionageJun 09, 2026

Russia-Aligned Groups Still Exploit WinRAR Flaw to Plant Stealers in Ukraine

Two Russia-aligned campaigns are still abusing a known WinRAR vulnerability to target organizations in Ukraine, nearly a year after patches became available. Trend Micro links the activity to Earth Dahu (also known as Gamaredon) and SHADOW-EARTH-066 (also tracked as UAC-0226). The shared entry point is CVE-2025-8088, a path traversal issue that lets attackers write files […]

Network SecurityJun 09, 2026

The Hidden Risk in Modern Networks: Work Between Tools

Security teams see more than ever. Bigger tech stacks. Better coverage. More AI and automation to handle routine work. Yet the same problems linger: outages that last hours, lost revenue, slow MTTR, misconfigurations, and human error that trigger major incidents. Even with AI, teams feel stretched and exhausted. The issue isn’t detection or the tools […]

Browser SecurityJun 09, 2026

FROST: A Browser‑Based SSD Timing Attack That Reveals Sites and Apps

A malicious page can learn which websites you open and which desktop apps you launch by measuring your SSD’s timing—using only JavaScript. The technique, called FROST, runs inside the browser sandbox. No extensions. No native code. No permission prompt. You load the page, leave the tab open, and its code quietly measures drive contention in […]

Artificial IntelligenceJun 09, 2026

LiteLLM CVE-2026-42271 Exploited; Chain Enables Unauthenticated RCE

CISA has added a high‑severity LiteLLM issue to its Known Exploited Vulnerabilities catalog, citing active exploitation. The flaw, tracked as CVE-2026-42271 (CVSS 8.7), is a command injection bug that lets any authenticated user run arbitrary commands on the host. What’s affected BerriAI LiteLLM Python package versions ≥ 1.74.2 and < 1.83.7. Risk increases if your […]

LinuxJun 08, 2026

One-Character Linux Kernel Bug Enables Local Root; Exploits Now Public

One stray character in the Linux kernel’s nf_tables code led to a use-after-free that lets an unprivileged local user become root and escape a container. The flaw is tracked as CVE-2026-23111 and was fixed upstream on February 5, 2026. Working exploits are now public from multiple teams. What happened CVE-2026-23111 is a use-after-free in nf_tables […]

Mobile SecurityJun 08, 2026

Meta Blocks NSO Group’s WhatsApp Phishing Attempts, Seeks Contempt Order

What happened Meta said it detected and blocked spear-phishing attempts on WhatsApp linked to the Israeli spyware vendor NSO Group. The company is also filing a federal court contempt order, arguing that NSO violated a permanent injunction that bars it from targeting WhatsApp and its users. How the attempt worked According to Meta, the activity […]

Network SecurityJun 08, 2026

Check Point VPN IKEv1 Flaw Exploited to Bypass Passwords

A critical flaw in Check Point’s Remote Access VPN and Mobile Access, when configured to use the deprecated IKEv1 key exchange protocol, is being actively exploited. The issue, tracked as CVE-2026-50751 (CVSS 9.3), stems from a logic flow weakness in certificate validation. In practice, it lets an unauthenticated remote attacker establish a remote access VPN […]

PrivacyJun 05, 2026

SNAP: Private Agent Payments on Solana with Zero‑Knowledge Proofs

AI agents are starting to act like businesses. They pay for APIs, buy data, settle trades, and manage compute on their own. Put those payments on a public chain, though, and a hard problem shows up: surveillance. When every payment is public, an agent’s financial graph is exposed. Who it pays. How much. When. That […]

AutomationJun 05, 2026

Stop uploading your app manually—let Fastlane handle it

Every mobile dev has a release ritual. Mine took 30–40 minutes a week and didn’t help users at all. If you ship to both stores, you know the routine. Open Play Console, create a release, upload the AAB, write notes, submit for review. Then repeat in App Store Connect—now add Xcode archives, signing certificates, and […]

AIJun 05, 2026

Cut Agent Token Usage by 89%—Without Touching the Agent

Every time your agent calls an LLM, it quietly resends the full conversation history. Turn 20 includes turns 1–19. Turn 50 includes turns 1–49. It’s invisible, automatic, and expensive. I noticed this while building Trooper—a Go proxy that sits between agents and LLMs. Watching token counts climb over a long debugging session made it clear: […]

FediverseJun 05, 2026

200 Accounts: Wiring the Fediverse Registration Coordinator to Disk

There was a clear goal: reach 200 accounts in the Fediverse expansion. The coordinator existed. The target was set. But nothing wrote results to disk. That kind of gap is frustrating. You can call register_one, get a valid token back, and then… the process drops it on the floor and exits. No persistence. No registry […]

CybersecurityJun 05, 2026

Critical Everest Forms Pro RCE Exploited; Skimmer Campaigns Abuse Stripe as C2

If you maintain a WordPress site using Everest Forms Pro, this needs your attention. Attackers are actively exploiting a critical remote code execution flaw to take over sites. Here’s the short version and the steps that make progress visible. What’s affected The issue is tracked as CVE-2026-3300 (CVSS: 9.8) and impacts all versions up to […]

Machine LearningJun 05, 2026

PyTorch for Neural Networks Part 6: Understanding Epochs and Loss

In the previous article, we prepared everything we need to optimize our neural network and find the ideal value for the final bias. Now we’ll begin the optimization process—step by step. Keep it simple. Make progress visible. Creating the Optimizer First, we create an optimizer object. We’ll use Stochastic Gradient Descent (SGD) to optimize final_bias: […]